writeups.xyz / EN | Account Takeover and Sensitive Data Leakage via CORS Misconfiguration

Submitter : c2a

Date: 4 July 2020

Bounty : undisclosed

Vulnerabilities :

• CORS Misconfiguration
• CSRF
• Account Takeover

Programs :

• Undisclosed

Authors :

• Lütfü Mert Ceylan (@Lutfumertceylan)

Link :
https://lutfumertceylan.com.tr/posts/ato-and-data-leakage-via-cors-misc/